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Abstract 

Malware plays a significant role in breaching 
computer systems. Previous research has focused 
on malware detection even though detection is up 
against theoretical limits in computer science and 
current methods are inadequate in practice. We explain 
the susceptibility of computation to malware as a 
consequence of the instability of Turing and register 
machine computation. The behavior of a register 
machine program can be sabotaged, by making a 
very small change to the original, uninfected program. 
Stability has been studied extensively in dynamical 
systems and in engineering fields such as aerospace. 
Our primary contribution introduces mathematical tools 
from topology and dynamical systems to explain why 
register machine computation is susceptible to malware 
sabotage. A correspondence is constructed such that 
one computational step of a Turing machine maps to 
one iteration of a dynamical system in the x-y plane 
and vice versa. Using this correspondence, another 
contribution defines and demonstrates a structural 
instability in a Universal Turing machine encoding. 
One research direction proposes to better understand 
instability in conventional computation by studying 
non-isolated metrics on the space of Turing machines; 
another suggests searching for stable computation in 
unconventional machines. 

1. Introduction 

Malware can exploit a weakness in current computer 
systems; user authentication does not protect the 
execution of the user’s intended action. Malware can 
circumvent strong authentication on a hardware token 
[1], even when it is tightly integrated with strong 
cryptographic protocols. As aptly stated by Shamir [2], 
“cryptography is typically bypassed, not penetrated”. 

It seems unlikely that malware detection methods 
[3, 4, 5] can solely provide an adequate solution to the 
malware problem. First, it is known that there is no 


Turing machine algorithm that can detect all malware 
[6]. Second, some recent malware implementations 
use NP problems [7] to encrypt and hide the malware 
[8]. Overall, detection methods are currently up against 
fundamental limits in theoretical computer science [9]. 

Rather than continue to pursue detection, we explain 
a register machine’s [10, 11] susceptibility to malware 
as a consequence of the instability of conventional 
computation. The instability of register machine 
computation enables malware to sabotage the purpose 
of a computer program, by making small changes to an 
original, uninfected program. Programming languages 
such as C, Java, Lisp and Python depend upon 
branching instructions. After a branching instruction 
of a register machine program has been sabotaged, 
even if there is a routine to check if the program is 
behaving properly, this friendly routine may never get 
executed. The sequential execution of register machine 
instructions cripples the program from protecting itself. 

To the best of the author’s knowledge, prior research 
[12, 13, 14] has not attempted to understand malware 
susceptibility in terms of structural stability. Dynamical 
systems [15, 16, 17] has extensively studied stability. 
Our primary contribution introduces mathematical 
tools from topology and dynamical systems theory 
to explain why register machine computation is 
susceptible to malware sabotage. We construct a 
correspondence such that each computational step of a 
Turing machine program corresponds to one iteration 
of a dynamical system in the x-y plane. Using 
this correspondence, another contribution defines and 
demonstrates a structural instability in a Universal 
Turing machine encoding. This is relevant in practice 
because a programming language cannot express 
universal computation unless its compiler or interpreter 
“acts as a Universal Turing machine.” 

2. Unstable Computation 

Two examples illustrate what we mean by unstable 
computation. Our first example is a C source code [18] 
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listing that sorts four integers. This C program shows 
how even small changes to a single machine instruction 
can substantially alter the program’s behavior. 

#includ.e <std.io.h> #include <stdlib.h> 

#include <string.h> 

#define NUM_BITS 16 

int pow_2[NUM_BITS] = {0x8000, 0x4000, 0x2000, 

0x1000, 0x800, 0x400, 

0x200, 0x100, 0x80, 0x40, 

0x20, 0x10, 0x8, 0x4, 0x2, 0x1}; 

int greater_than(int pi, int p2) 

{ return (pi > p2); } 

int less_than(int pi, int p2) 

{ return (pi < p2); } 

void slow_sort(int* v, int n, int (*op)(int, int)) { 
int i, k, x; 
for(i = 0; i < n; i++) 
for(k = 0; k < i; k++) { 

if ( op(v[l], v[k]) ) { 

X = V [ i ] ; 

v[i] = v[k]; 
v[k] = x; 



void display_numbers(int* v, int n) { 
int k; 

printf ( " \n'’) ; 
for(k =0; k < n; k++) 
printf {'’%d ", v [k] ) ; 

} 

void print_binary(unsigned int v) { 
int k; 

for(k = 0; k < NUM_BITS; k++) { 

if (v / pow_2[k]) printf("1 "); 
else printf("0 " ) ; 

V %= pow_2[k]; 

} 

printf("\n"); 


void sort_pr(int* nums, int n, char* fn, 

int (*op) (int, int) ) { 

slow_sort(nums, n, op); 
display_numbers(nums, n) ; 
printf(" address of instruction"); 
printf("%s \n ", fn); 

print_binary((unsigned int) op) ; 


int main(int argc, char* argv[]) 

{ 

int nums[4] = {6, 9, 7, 8}; 
display_numbers(nums, 4); 
printf("\n"); 

sort_pr(nums, 4, "less_than", less_than); 
sort_pr(nums, 4, "greater_than", greater_than); 
return 0; 

} 

Figure 1 shows an execution of this C program. The 
ordering of the sorted numbers (6, 7, 8,9) is reversed to 
(9, 8, 7,6), by flipping only two bits of one instruction. 
This C program exhibits unstable computation because 
a small change (i.e., flipping two bits) in the C program 
causes a substantial change to the outcome of its 
computation: namely, it changes from sorting integers in 


~MacBook-Air:sort$ ./sort 
6 9 7 8 

6789 address of instruction less_than 
1101101001000000 

9876 address of instruction greater_than 
1101101000010000 

Figure 1. Sorting order reversal 


ascending order to sorting integers in descending order. 

In Figure 2, the code demonstrates how to hijack 
a register machine program, by inserting only one 
jmp WVCTF instruction or changing the address of one 
legitimate jmp instruction to WVCTF. 


WVCTF: 

mov 

eax. 

drl 


jmp 

Loci 


Loc2 : 

mov 

edi, 

[eax] 

LOWVCTF: 

pop 

ecx 



jecxz 

SFMM 



inc 

eax 



mov 

esi. 

ecx 


dec 

eax 



nop 




mov 

eax, 

Odeoih 


jmp 

Loc3 


Loci: 

mov 

ebx. 

[eax+lOh] 


jmp 

Loc2 


Loc3 : 

pop 

edx 



pop 

ecx 



nop 




call 

edi 



jmp 

LOWVCTF 

SFMM: 

pop 

ebx 



pop 

eax 



stc 




Figure 2. Polymorphic malware instructions 

3. Motivating Stable Computation 

Register machines execute one instruction at a 
time. After a register machine program has been 
hijacked, even if there is a routine to check if the 
program is behaving properly, this friendly routine 
may never get executed. The sequential execution 
of register machine instructions cripples the program 
from protecting itself against malware. Typical 
programming languages (e.g., C, Java, Lisp and 
Python) are Turing complete and depend upon 
branching instructions. While conditional branching 
instructions are not required for universal computation, 
Rojas’s methods [19] still use unconditional branching 
and program self-modihcation. Moreover, about 75% 
to 80% of the control flow instructions, executed on 
register machines, are conditional branch instructions. 
(See figure A.14 in [11].) 
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These observations suggest that a computer 
program’s purpose can be subverted because the register 
machine behavior is not always stable when small 
changes are made to its program. Why is this insight 
useful for designing malware resistant computation? 

Overall, we seek malware resistant computation 
based on the following principle: design the 

computation so that if malware makes a small 
change, the program’s purpose is stable; if a larger 
change is made, the program’s purpose is completely 
destroyed. Our goal is to create stable computation that 
is incomprehensible to malware authors [20] so that 
it is far more challenging for malware to subvert the 
program’s behavior without completely destroying it. 

4. A Program is a Dynamical System 

In dynamical systems, stability has been studied for 
over 80 years [21]. There is currently no mathematical 
definition of stable computation. Thus, in this section, 
our primary goal is to explain how the execution of 
a computer program corresponds to the iteration of a 
dynamical system in the x-y plane. This correspondence 
should enable us to apply powerful, mathematical tools 
to computation, that already have been developed in 
dynamical systems theory. 

One of our goals is to reach some topological insight 
on understanding the instability in Turing and register 
machine computation. We seek topological insight 
because open sets in a topology provide a more general 
and flexible method for characterizing closeness than 
Euclidian distance. This is ideally how we would like 
to model small changes in a computer program. 

With a simple example shown in Figure 3, we 
informally describe how each Turing machine (TM) 
[22] corresponds to a dynamical system, generated 
from a finite set of affine functions in the x-y plane. 
The appendix provides a comprehensive, mathematical 
treatment of this correspondence. The appendix shows 
that any computer program can be mapped to a 
corresponding dynamical system. Furthermore, one 
iteration of this dynamical system computes a result that 
is equivalent to the execution of one computational step 
of the Turing machine. 

It is well-known that register machine computation 
is equivalent to TM computation and both formalisms 
model the behavior of a digital computer. (In [10], see 
footnote 19, page 386 and chapter 5.) This equivalence 
justifies our constructing a map from a Turing machine 
to a dynamical system in the x-y plane and concluding 
that these dynamical systems can characterize instability 
in register machine programs. 

First, a TM is reviewed. A TM has a tape T that is 


represented as a function T : Z ^ A where Z is the 
integers and A = {ai,..., a„} is a finite set of alphabet 
symbols that are read from and written to tape squares 
on the tape. Here Ti = T{i) is the alphabet symbol on 
tape square i. There is a finite set of machine states Q = 
{qi,... ,qm} and a distinct halting state h. The function 
T] : Q X A ^ Q U {h} x A x {—1, +1} specifies the 
program instructions. The execution of one instruction 
is called a computational step of the TM. 


Program 


rj 

# 
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b 

q 
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Figure 3. Turing machine execution steps 


Figure 3 shows the execution of a simple TM with 
alphabet A = {^,a,b} and states Q = {( 7 ,r, s}. The 
initial state is q. Initially, the tape has a ^ (blank) 
symbol in every tape square. The first instruction 
executed is r]{q, = (r, a, +1): it replaces the ^ with 

an a on the tape, jumps to state r, and then the tape head 
moves right one tape square. 
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4.1, The (j) Correspondence 

Set base B = \A\ + |(5| + 1. Define value function 
v : {h} U (5 U A —> {0,1,..., i? — 1} as ^{h) = 0, 
iy{ai) = i and v{qi) = z + |A|. v maps each alphabet 
symbol and each state to a unique symbol in base B. 

(j) is the map that creates a one-to-one 
correspondence from the program instructions to a 
finite set of affine functions in the x-y plane. <j) maps 
each machine configuration to a unique point in the x-y 
plane. (/) maps right instruction ? 7 (( 7 , T^) = (r, a,-fl) 
to affine function f{x, y) = {Bx m, ^y -f n), where 
m = —B‘^v{Tk) and n = Bv{r) -f v{q) — v{q). 
(j) maps left instruction ri{q,Tk) = (r, a, — 1 ) to 

affine function g{x,y) = {^x -f m,By -f n), 

where m = Bv{Tk_i) -f v{a) — v{T}f) and 
n = Bv{r) - B‘^iy{q) - Biy{Tk-i). 

After each step, the TM is in some configuration 
{q,k,T) e Q X Ia X A^. maps {q,k,T) to 

OO OO 

( E ,y{Tk+,+i)B-i, B,,iq)+Y.HTk-j-i)B-^) in 
i=-i j=o 

the x-y plane. Both the x and y coordinates are 
convergent sums. Since the tape contains a finite number 
of non-blank symbols, after a finite number of terms, the 
tail of each sum is a geometric series. 

4.2, One Computational Step is One Iteration 

The execution of the TM in Figure 3 is faithfully 
modelled by iterating the corresponding affine 
functions. Since alphabet A = {^,a, 6} and states 
Q = {q, r, s}, base B = 7. Also, iy{h) = 0, v{fi) = 1, 
i^{a) = 2, i/{b) = 3, ^{q) = 4, zz(r) = 5 and z/(s) = 6 . 

<j) maps the initial machine configuration in Figure 
3 to point p = {px,Py) in the x-y plane, where px = 

Bixm + ^ = and py = Bv{q) + ^ = 29^. 

The first step executes instruction r]{q, fi) = 
(r, a, -fl), which corresponds to applying affine 
function fi{x,y) = {7x — 49, ^y + 33) to p. For /i, 
m = —7‘^v{fi) = —49 and n = 7v{r) -f v{a) — v{q) = 
33. The first iteration is /i( 8 g, 29g) = ( 8 |, 37g). 

The second step executes ri{r,fi) = {q,b,—l). 
The second step corresponds to applying affine function 
f 2 ix,y) = {^x -f 16,7y - 231) to point (8i,37i), 
where m = 7z^(a) -f z/( 6 ) — J^(#) = 16 and n = 
7v{q) — 7^zz(r) — 7v{a) = —231. The result of the 
second iteration is 72 ( 8 g, 37g) = (17g,29g). The third 
iteration is computed similarly. The orbit of p includes 
p and all points reached after each iteration. 

As a summary, executing a Turing machine 
corresponds to iterating a discrete, autonomous system 
in the x-y plane; the dynamical system consists of a 


finite number of affine functions, whose domains lie in 
distinct unit squares. If configuration {q, k, T) halts after 
n computational steps, then the orbit of (j){q, k, T) exits 
one of the unit squares on the nth iteration, and enters 
the halting attractor. (See definition 10 in the appendix.) 
If configuration (r, j, S) never halts, then the orbit of 
j, S) remains in these unit squares forever. 

5. Applying Topology to Computation 

In this section, we work toward formalizing our 
intuitive explanation of unstable computation discussed 
in the prior sections. Structural stability characterizes 
the stability of a dynamical system under small changes 
or perturbations [23]. With this in mind, we review some 
mathematical definitions and italicize their names. 

A topology [24] on a set 2f is a collection T of 
subsets of X having the following properties: (a) 0 and 
X are both in T; (b) The union of the elements of any 
subcollection of T is in T; (c) The intersection of the 
elements of any finite subcollection of T is in T. A set 
X for which a topology T has been specified is called 
a topological space. A subset U of X is called open in 
this topology if U belongs to the collection T. 

Let M be the real numbers. As an example of a 
topological space, for real numbers a and b, the open 
intervals (a, &) = {x G M : a < a; < 6} form a 
basis for the standard topology on the real numbers, 
generated from arbitrary unions of open intervals and 
finite intersections of open intervals. 

Let X and Y be topological spaces. The function 
f : X —>■ Y is continuous if for any open subset U of Y, 
the inverse image f~^{U) = {x & X : f{x) lies in [/} 
is open in X’s topology. The function ft, : —> L is a 
homeomorphism if ft is continuous, ft is one-to-one and 
onto, and ft’s inverse h~^ :Y —> AT is continuous. 

5.1. Topological Conjugacy 

A discrete, dynamical system is a function / : 27 —> 
X, where 27 is a topological space. The orbit of p is 
{/"(p) : n G N}, which is the set of points, obtained 
by iterating / on initial point p. Consider discrete, 
dynamical systems / : 27 —)• 27 and g ■. Y ^ Y. 
/ and g are topologically conjugate if / and g are 
continuous functions and there exists a homeomorphism 
h : X ^ Y such that ft o / = (/oft. Topologically 
conjugate functions exhibit equivalent dynamics. For 
example, if / is topologically conjugate to g via ft and 
p is a fixed point for /, then ft(p) is a fixed point for 
g. Similarly, ft induces a one-to-one correspondence 
between the periodic points of / and g. Suppose p G 27 
has period n with respect to /. Then /"(p) = p, so 

Hp) = HFip)) = = 9°Hf"‘~^ip)) = 
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o /l(/" = ... = gn 1 o h{f{p)) = g"‘ih{p)). 

Thus, h{p) is a periodic point of g with period n. 

Topological conjugacy is a useful notion for 
computation because after a Turing machine has halted, 
its halted machine configuration represents what the 
Turing machine has computed. Furthermore, each 
halted machine configuration corresponds to a fixed 
point (halting point) of the dynamical system. If h is 
a topological conjugacy with h o f = g o h, then p is 
a fixed point of / if and only if h{p) is a fixed point. 
Hence, a topological conjugacy between machines Aii 
and A ^2 induces a one-to-one correspondence between 
the halting configurations of A^i and A^ 2 - 

In the appendix, the <j) correspondence, between 
halting configurations of a Turing machine and fixed 
points of the corresponding dynamical system in the 
x-y plane, can be applied to any Turing machine. (See 
definitions 10, 11, and theorem 2.) Thus, for any 
computer program V, regardless of 'P’s complexity or 
size, there exists a (j) correspondence that is general 
enough to apply to program V. 

Lastly, there is an algorithm that receives 
program V, initial tape T, and initial state q as input. 
During the computation, A(j, prints the initial point p 
in the x-y plane and a finite set of affine functions 
that represents the dynamical system, corresponding 
to V. The computations performed by algorithm 
A,p are explicitly specified in definition 6, remark 1, 
definition 8, and definition 9. Mathematical proofs - 
that the computations performed by At/, are correct - are 
provided in lemma 2, lemma 3, and theorem 2. 

5,2, Metric Spaces and Structural Stability 

A metric space is a set X and a function (metric) 
d : XxX —> M, such that the following three conditions 
hold, (i) d{a, b) > 0 for all a,b & A where equality 
holds if and only if a = 6. (ii) d{a, b) = d{b, a) for all 
a,b & A. (Symmetric), (iii) d{a, b) < d{a, c) + d{c, b) 
for all a,b,c ^ X- (Triangle inequality). 

Given e > 0, define the e-ball Bd{x,e) = {y G 
X : d{x,y) < e}. The collection of all e-balls, 
where e > 0 and x G AT, is a basis for a metric 
topology on X, induced by d. In the appendix, lemma 
1 implies that for a fixed Turing machine, the set of 
all its machine configurations is a metric space. This 
means metric p, defined in lemma 1, on the set of all 
machine configurations can measure the closeness of 
two machines. 

Let {X, d) be a metric space. The (7° distance 
between functions f : X —>■ X and g : X —>■ X is given 
by Poif,g) = sup{d{f{x),g{x)) : x G X}, where sup 
is the least upper bound. A function f : X —>■ X is said 


to be structurally stable on X if there exists e > 0 
such that whenever po{f, g) < e for g : X ^ X, then / 
is topologically conjugate to g. 

In other words, a dynamical system / is structurally 
stable if for all dynamical systems g that are close to 
/, then / is topologically conjugate to g. Structural 
stability is a mathematical tool that we want to apply 
to computer programs (i.e., Turing machines). We can 
accomplish this by using the </> correspondence between 
the execution of a computer program and the iteration of 
the program’s corresponding dynamical system. 

6, Instability in Turing Computation 

In this section, we apply structural stability to a 
particular Universal Turing machine (UTM), which 
hereafter will be called machine U. We show that bPs 
computation is unstable under arbitrarily small changes. 

Our demonstration of U’s unstable computation is 
relevant to practical applications based on the following 
line of thinking. A C compiler acts as a Universal 
Turing machine, where the programs executed are valid 
C programs. More concretely, a valid C compiler can 
be executed with a finite table of Turing instructions, 
called Vc, according to the encoding used by universal 
machine U. Since VPs computation is unstable, there 
could be a distinct, finite table of Turing instructions, 
called Vmai, that subverts the purpose of valid C 
compiler Vc, and Vmai is very close to Vc- 

6,1, An Unstable UTM Encoding 

The encoding used by machine U is shown in Figure 
4 and Figure 5. Machine U has alphabet 0,1}, and 
its states are Q = {qi, q 2 , ■ ■ ■ ,qu}- A program table for 
U is not provided, but a table can be constructed, based 
on the description provided here. 


Before Universal Turing machine execution starts 



Figure 4. Universal Turing Machine M 

We assume U starts execution, scanning a blank 
symbol A sequence of n I’s to the left of the bPs 
initial tape head location is a unary encoding for the 
nth Turing machine M„ that machine 14 executes. The 
sequence of O’s and I’s to the right of Id’s initial tape 
head location are the input to machine M„. Also, it is 
well-known that a finite number of states and alphabet 
{#, 0,1} can represent any TM [25]. 
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M, 



The enumeration of each Turing machine by 
machine U works as follows: The number of distinct 
programs (p’s) for a fixed number of states |(5| is 

(2|A||(3| + The first 12^ machines are 

all the possible Turing programs with Q = {pi} and 
A = {^,0,1}. Figure 5 shows the program for Mi 
that U explicitly constructs for the unary representation 
of 1 before U starts executing Mi ; the input for Mi is 
to the right of Ws initial tape head location. When the 
unary value is 12^ + 18® + 1, then all possible Turing 
programs with Qi = {pi} and Q 2 = {< 71 , 92 } have been 
exhausted, so the enumeration updates the state set to 
Qs = { 91 , 92 , gs}- The program for Mias+igs+i is also 
shown in Figure 5. This encoding works for each finite 
set of states Qn = { 91 ,..., 9 „} for every n G N. 

Based on the (f) correspondence, our next definition 
measures a distance between two Turing machines in 
terms of the encoding used by machine U. Note that 
our metric definition depends upon the encoding that 
machine U uses. 


Definition 1. Turing Machine Encoding Metric p 
For universal machine U, let Mn and Mm denote the 
TMs encoded by n and m I’s, respectively. Set i'{h) = 
0, :/(#) = 1, :.(0) = 2, 1^(1) = 3, u{qi) = 4 
... v{qij) = U + 3 where the states of the UTM 
are qi,.--qu- Set B = [/ + 4. For m < n, 

n —1 00 

define p{M^,Mm) = | E + E 

1=0 i=n 

m —1 00 n —1 

- E - E = 2 E B-^ 

j=0 j—m j—'fn 

Theorem 1. Universal Turing machine lA has unstable 
computation in the following sense. For any e > 0, there 
exist two distinct Turing machines closer than e with 
respect to p such that the respective dynamical systems 
of these two machines are not topologically conjugate. 

This means two different Turing machines that are 
arbitrarily close with respect to p exhibit different 
computing behavior. 

PROOF. As above, let Qk = { 91 , ( 72 , • ■ •, 9fc} and thus, 
\Qk\ = k. Derived from Efc=i(2|^|fc + 2 |A|)I'^I^, 
define function / : N —> N where /(n) = Efc=i( 6 fc + 
6 ) 3 /c Then the machine Mjqn) has only halting 
configurations for all n. Machine is shown 

in Figure 6 . For each interval of natural numbers 
[f{n),fin + l)],M^(^„) satisfies /(n) < iy(n) < f{n + 
1). Also, Myi^n) has no halting configurations. Thus, 
is not topologically conjugate to for all n. 

Further, ^ implies that 

for all e > 0 , there are two machines closer than e and 
they are not topologically conjugate. □ 


d 

# 

0 

1 

91 

(qi, 0 ,+l) 

(92, 1 ,- 1 ) 

(92, #,-l) 





9k 

{qk+i, 0 ,+l) 

(qk+i, 1 ,- 1 ) 

(^Tk+l, #,-l) 





9n 

(91, o,+ i) 

(91, 1 ,- 1 ) 

(91, #,-l) 


Figure 6. Turing Machine M^(„) 


6.2. Non-Isolated Metrics are Useful 

Let AT be a topological space. A separation of X is 
a pair U, V of disjoint open subsets of X whose union 
is X. X is connected if there does not exist a separation 
of X. A topological space is totally disconnected if its 
only connected subsets are one-point sets. 

One of our goals is to mathematically model the 
stability of computation with respect to small changes. 
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If metric D on topological space X satisfies the property 
that for all x G X, there exists an e > 0 such that 
Bjj{e,x) only contains x, then D is called an isolated 
metric. An isolated metric cannot quantify an arbitrarily 
small change to a machine, so it has no utility for 
defining stable computation. 

Let Ml, M2 ,... be an enumeration of all Turing 
machines for some UTM. For each m, define the metric 
7 (Mm, Mm) = 0 and ^{Mm, M„) = 1 when m ^ n. 
7 vacuously satisfies the stability property since any two 
distinct Turing machines are a distance of 1 apart. 7 is 
an example of an isolated metric. Moreover, for every 
Universal Turing machine enumeration {Mi, M 2 ,... }, 
the machine space dJl = {Mm : m G N}, induced by 7 , 
is totally disconnected. 

A metric is non-isolated on machine space 911 if the 
metric does not disconnect 911. A longer-term goal is 
to mathematically characterize non-isolated metrics and 
use them to search for machines M in 911 that exhibit 
stable computation in an open neighborhood of M. 

Determining whether a metric is isolated, 
independent of the UTM, seems subtle. This is 
shown in example 1 : a metric r is defined to measure 
how closely two orbits of two Turing machines match, 
which seems to be a natural measure of closeness. 
Example 1. 

Let Ml,M 2 ,... be an enumeration of all Turing 
machines for some UTM. Let ? 7 „ be the program 
instructions for machine M„ and r]m the program 
instructions for Mm- I = {<lo,i,T) is an initial 
machine configuration, where 1 < i < n and T{j) = 
Gj G {0,1,#} for 1 < j < n and T{j) = 
# when j < 0 or j > n. Let (^(i,n), a(i,n)) 

■ • • (^(fc,n )5 ^he sequence 

of inputs for ? 7 „ in the first k computational 
steps of M„ and ((?( 7 m),a(i.m)) ■ • ■ (^(fc.m) ; ) 5 

(#fc+i.m),a(fc-ri.m)) be the sequence of inputs for rjm- 
Assume both machines have the same initial starting 
state (Jo = (J(i,„) = 9 ( 1 ,m). Let k{I,M„,Mm) be the 
number of computational steps until M„ and Mm differ 
with respect to their execution steps, i.e. the first k such 
that TJji ( 9 (/i:,r^);tl(fc, 7 ^() # T]m )■ 

For only configuration I, the distance between 
machines Mm and Mn is defined as /i(/, Mn, Mm) = 
2 -fc-i-i^ In the special cases, where ? 7 „((j(j, a(fe,„)) 

= a(fc,m)) for all k either because it is an 

immortal orbit or a halting orbit, then /i(/, Mn, Mm) = 
0. Let F be the set of all tapes T such that T{j) G 
{0, 1, #} for 1 < J < n and T(j) = # when j < 0 
or J > n. Define r{Mm,Mn) = sup{jt(/, M„, M„) : 
/ e Q X {1,..., nj X Fj. 

If m # n, there is some instruction where 
r]m{q,G) # r]n{q,a). Consider initial configuration 


I = {q, 1, T) where T(l) = a. Then jt(/, Mn, Mm) = 
so r{Mm,Mn) = 1. Further, r{Mm, Mn) = 0 
when m = n. 

Although metric r seems to carefully measure 
the distance between machines based on how many 
computational steps match, r is the same metric as 7 , 
so r is an isolated metric. 

7. Two Research Directions 

Classical dynamical systems theory helps to 
introduce new notions for characterizing the stability of 
digital computer programs. There is empirical evidence 
that malware can change the purpose of a computer 
program by making very small changes to the original 
program; only one address of one branch instruction 
in a digital computer program needs to be changed in 
order to subvert the machine to execute the malware. 
Malware authors are able to exploit this vulnerability 
because register machines rely on branch instructions 
and execute their instructions one at a time. 

In section 6 , we constructed a universal machine 
U that is unstable with respect to metric p. Further 
research should study other non-isolated metrics and 
their relationship to other Universal Turing machine 
encodings. A goal is to find more general mathematical 
conditions when a TM computation is structurally 
unstable that includes a search for non-isolated metrics 
on the space of Turing machines. If there exist 
conditions for stable TM computation, then this 
know-how could help design more robust digital 
computer programs. 

Using our mathematical tools for understanding 
stable computation, a second research direction should 
further develop machines that can simultaneously 
execute multiple instructions. Using the active element 
machine’s inherent parallelism [26], it might be 
possible to program redundancy in the element and 
connection commands, and to repair a sabotaged 
program with met a commands. A goal is to build 
active element machine programs whose purpose does 
not change even when some of the commands in a 
program have been sabotaged. Overall, we propose to 
search for unconventional machines that can execute 
stable computation. 
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Appendix 

A Turing Machine is defined; function rj specifies the 
program instructions instead of quintuples [27]. 
Definition 2. A Turing machine is a triple {Q, A, rf): 

(1) Q is a finite set of states that does not contain a 
unique halting state h. 

(2) A is a finite alphabet whose symbols are read from 
and written to a tape. ^ is the blank symbol. 

(3) —1 and -fl represent advancing the tape head one 
square to the left or right, respectively. 

(4) 7] : Q X A —>■ Q U {h} x A x {—1, +1} specifies 
the program instructions. 

For each q in Q and a in A, rj{q,a) = (r,/3,x) 
describes how the machine executes one computational 
step. When in state q and reading alphabet symbol a 
on the tape, machine {Q,A,ri) jumps to state r, and 
replaces symbol a with /3 on the tape. 

If a; = —1, the tape head moves one square to the left 
on the tape. If x = +1, the tape head moves one square 
to the right on the tape. If r = ft,, machine (Q, A, rj) 
enters halting state ft, and stops executing. 

Definition 3. Turing Machine Tape 

Function T : Z —A represents the tape T. Before 

machine execution begins, the tape contains a finite 

number of non-blank symbols. The alphabet symbol on 

the ft* square of the tape is denoted as T{k) or Tj~. 

Definition 4. Tape Head Location 

Let (Q,A, p) be a Turing machine with tape T. A 

configuration is an element of the set C = Q U {ft} x 

Z X {T|T : Z —> A}. If (g, k, T) is a configuration, then 

k is the tape head location on tape T. 
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Definition 5. Turing Machine Computational Step 
Consider {Q,A,r]) in configuration {q,k,T), where 
T{k) = a. After executing one instruction, the new 
configuration is determined by one of the four cases. 

(1) {r,k-l,S) if r]{q, a) = {r,b,-l). 

(2) {r,k + l,S) if i]{q, a) = {r,b,+l). 

(3) {h,k-l,S) if r]{q, a) = {h,b,-l). 

(4) {h,k + l,S) if r]{q, a) = {h,b,+l). 

In cases 1^, the new tape S satisfies S{j) = T{j) 
when j ^ k and S{k) = b. In cases 3 and 4, the 
machine execution halts after the step is completed. If 
the machine is currently in configuration (gojfcojTb) 
and over the next n steps the sequence of configurations 
is {qo,ko,To), {qi,ki,Ti), ..., (g„, fc„, T„), then this 
sequence is called the next n computational steps. 
{q, k, T) is immortal if (g, k, T) never halts. 

This next part shows the correspondence between the 
execution of the Turing machine and the iteration of a 
dynamical system in the x-y plane P. 

Definition 6. Machine Configurations Plane P 



For a fixed machine, each configuration (g, k, T) 
represents a unique point (x, y) in the x-y plane P. Let 
£ be the set of configurations. 

Coordinate function a; : £ —)• P is x{q,k,T) = 
TkTk+i . Tk+ 2 Tk+ 3 Tk+i ..., where x{q, k, T) is the 

OO 

number Bv{Tk) + v{Tk+i) + ^v{Tk+j+i)B~P 

Coordinate function j/ : £ —)• P is j/(g, k,T) = q 
Tk-i . Tk- 2 Tk- 3 Tk -4 ■ ■ ■, where y{q,k,T) is the 

OO 

number P:/(g) + i/(Tfe_i) -\-J2^{Tk-j-i)B~P Define 

i=i 

function (/):£—> P as (j){q,k,T) = {x{q,k,T), 
y{q, k, T)). Let Tt be the immortal configurations in £. 
Definition 7. Equivalent Configurations 
{q,k,T) ~ (r,j,V) if g = r and T{m) = V{m + 
j — k) for every integer m. Configurations (g, k, T) 
and (r, j, V) are called equivalent, since ~ is an 
equivalence relation on £. £ is the set of all equivalence 
classes [(g, k, T)] on £. <j) maps every configuration in 
equivalence class [(g, k, T)] to the same point in P. 

( 0 ,is a metric space if the three conditions hold: 
(1) c)(a, b) > 0 for all a,b G X where equality holds if 
and only if a = 6. (2) b{a, b) = d{b, a) for all a,b G 
X. (Symmetric.) (3) d{a, b) < 0(a, c) + c)(c, b) for all 
a,b,c G X. (Triangle inequality.) 


Lemma 1. (p, £) is a metric space where p is 

induced via f by the Euclidean metric in P. 

PROOF. For points pi = {xi,yi), p 2 = ( 0 : 2 , 2 / 2 ) 
in plane P, let d be the Euclidean metric 
d{pi,P 2 ) = \/ (a^i - X 2 Y + ( 2/1 - 2 / 2 )^^ Let 

u = [(g, k, S')], w = [(r, I, T)] be elements of £. Define 
p : £ X £ —> M as p{u, w) = d(^(j){q, k, S), I, T)) = 

\Jix{q, k, S) - x{r, I, P))^ + (p(g, k, S) - y{r, I, T))^. 

The symmetric property and the triangle inequality 
hold for p because d is a metric. In regard to property 1, 
p{u, w) > 0 because d is a metric. 

The condition p{u, w) = 0 if and only u = w also 
holds. If u = w, then (g, k, S) ~ (r, I, T). This implies 
g = r and S(m) = T{rn-\-l — k) for every integer m, so 
(j){q, k, S) = I, T). Since d is a metric, p{u, w) = 0. 
If u w, then (j){q,k,S) 7 ^ (j){r,l,T), which implies 
p{u,w) = d{f{q,k,S),(j){r,l,T)) □ 

Remark 1. Unit square domain 

P( , ly\) has a lower left corner ([xj, [t/J), where 
[xj = BvlTk) + v(Tk+i) and [y\ = P:^(g)+ ^(Tfc_i). 

Definition 8. Left Affine Function 

Case (1) in definition 5 where ri{q, Tk) = (r, b, —1). 



Tk-3 

Tk-i 

Tk-i 

b 

7k+l 

7k+2 

7k+3 



[n 

The left affine function is derived as follows: 

X -G Tk-ib . Tk+iTk+2Tk+3 ■ ■ ■ 
gx = Tk . Tk+iTk+2Tk+3 ■ ■ ■ 

Subtract the numbers in base B, so m = Tk-ib — Tk- 
y -G rTk -2 . Tk-3Tk-A ■ ■ ■ 

By = qTk-iTk -2 • 7fc-3T'fc-4 • • • 

Subtract the integers in base B, so n = rTk -2 — 
qTk-iTk- 2 - Define function L : P([a;j,[i/j) —tPas 

L{x, y) = (gx + m, By-\-n) where m = Bv{Tk-i) + 
v{b) — v{Tk) and n = Bv{r) — B‘^v[q) — Bv{Tk-i). 
L is called a left affine function. 

Lemma 2. Left Affine TM Execution Step 

Let (g, k, T) be a machine configuration. Suppose 
r]{q,Tk) = (r, 6 , —1) for some state r in Q U {h} 
and some alphabet symbol 6 in A and where Tk = a. 
For the next execution step, the new configuration is 
{r,k — 1, T**) where T^{j) = T{j) for every j k and 
T^{k) = b. The commutative diagram L o ffq^ k, T) = 
f o r]{q^k,T) holds, so L{x(q,k,T), y{q,k,T)) = 
ixir,k-l,Tf>),y{r,k-l,Tf>)). 

PROOF. The x-coordinate of L{x{q, k, T), y{q, k, T)) 

= B~^x{q, k, T) + Bv{Tk-i) + v{h) — v{a) 

= B-'^{aTk+i . Tk +2 ■ • ■) + Bv{Tk-i) + vib) - v{a) 
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= a . Tk+iTk+2Tk+3 -h Bv{Tk-i) + v{h) - v{a) 

= Tk-ib . Tfc+iTfc+27fe+3 ■ • ■ 

Lastly, r]{q, Tk) = (r, b, —1) implies x{r, k — 1, T^) = 
Tk-ib. Tk+iTk+2 - 

The y-coordinate of L{x{q, k, T),y{q, k, T)) 

= By{q, k, T) + Bv{r) - B‘^v{q) - Bv{Tk-i) 

= B{qTk-i . Tk -2 ■ ■ ■) + Bv{r)-B‘^v{q)-Bv{Tk-i) 

= qTk-iTk-2 • Tfe-3- \-Bi2{r)-B‘^iy{q)-Bi'{Tk-i) 

= rTk-2 • Tk-sTk-i ■ ■ ■ 

= y{r,k-l,T’>). 

Lastly, ri{q,Tk) = (r,5,-1) implies y{r,k - 1,T*') = 

TTk—2 • 3^fc—4 • ■ • n 

Definition 9. Right Affine Function 

Case (2) in definition 5 where r]{q, T^) = (r, b, +1). 



The right affine function is derived as follows. 

X —> rfc_|_iTfc+2 . Tk+3Tk+4 ■ ■ ■ 

Bx = TkTk+iTk +2 • Tk+3Tk+4 ■ ■ ■ 

Subtract in base B,som = Tk+iTk +2 — TkTk+iTk+ 2 - 
y rb . Tk-iTk-2Tk-3 ■ ■ ■ 

TsV = q • Tk-iTk-2Tk-3 ■ ■ ■ 

Subtract the numbers in base B, so n = rb — q. 
Define the right affine function R : {/( ,Vv\) ^ B as 

R{x,y) = {Bx + m, + n) where m = —B‘^v{Tk) 
and n = Bi'{r) + ^( 6 ) — i'{q). 

Lemma 3. Right Affine TM Execution Step 

Let (q, k, T) be a machine configuration. Suppose 
viljTk) = (r, 6 ,+1) for some state r in Q U {h} 
and some alphabet symbol 6 in ^ and where T/. = a. 
For the next execution step, the new configuration is 
(r, k + 1, T^) where T^{j) = T{j) for every j ^ k and 
T^{k) = b. The commutative diagram R o ^( 5 , k, T) = 
(j) o r]{q,k,T) holds, so R{x{q,k,T), y{q,k,T)) = 
{x{r,k + l,Tf>),y{r,k + l,T^)). 

PROOF. The x-coordinate of R{x{q, k, T),y{q, k, T)) 
= Bx{q, k, T) — B^iy{a) 

= B{aTk+i . Tk+2Tk+3 ■ ■ ■ ) ~ B'^v{a) 

= oTk+iTk+2 • Tk+3 ■ ■ ■ — B‘^i/{a) 

= Tk+iTk+2 • Tk+3Tk+4 ■ ■ ■ 

= x{r, k + 1, T^) because ri{q, Tk) = (r, b, + 1 ). 

The y-coordinate of R{x{q, k, T), y{q, k, T)) 

= B~^y{q, k, T) + Bv{r) + v{b) - v{q) 

= B-^{qTk-i . Tk- 2 Tk -3 ■ ■ ■) + Bi^{r) + iy{b) - i^{q) 

= q . Tk-iTk- 2 Tk -3 -f Bv{r) + v{b) - v{q) 

= rb . Tk—iTk—2Tk—3 ... 

= y{r, k + 1, T^) because ri{q, Tk) = (r, b, + 1 ). □ 


Definition 10. Halting Attractor and Halting Points 
Define halting attractor = {{x,y) € P : 0 < 

X < 0 < 2 / < B — 1}. The halting 

points in P correspond (via (j>) to halting configurations 
{h,k,T). Using elementary algebra, one can verify 
that 2l/i contains the halting points. Define halting map 
f) : 2l/i —> 2l/i such that f}(x, y) = (x, y). Every p in 
is a fixed point of f). 

Definition 11. Halting and Immortal Orbits in P 
Let fk : Uk ^ P he a function for each k such that 
whenever j ^ k , then Uj C\Uk = % ■ For any p in P, 
its orbit is generated as follows. The 0* iterate of the 
orbit is p. Given the A:* iterate is point q, if point q does 
not lie in any Uk, then the orbit enters and halts (i.e., 
\){q) = q). Otherwise, q lies in some Uj. Inductively, 
the A: +1 iterate of q is defined as fj (q). p is an immortal 
point if p has an orbit that never enters Sl/j. 

Let {/i,/ 2 , •■•,//} be a set of functions fk : 
X X. A function index sequence 
{ 1 , 2 ,...,/} indicates the order that the functions are 
applied. If p lies in X, then the orbit with respect to this 
function index sequence is [p, fs{i){p), fs{ 2 )fs(i){p), 
■■■1 fs{ m )fsi m— 1 ) • ■ • fs{ 2 ) /s( 1 )(f). ■ • 

Theorem 2. Correspondence Theorem 
Consider machine {Q, A, rj) with initial configuration 
(s,0,T). W.L.O.G., we assume that {Q,A,ri) begins 
executing with its tape head location at 0. Let p — 
(x(s, 0, T), y(s, 0, T)). Per definitions 6 , 8 and 9, and 
remark 1 , let fk : Wk —> P, where 1 < A: < (, be the I 
corresponding affine functions with unit squares Wk- 

There is a one-to-one correspondence between the 
m* point of the orbit [p, fs(i){p), /s( 2 ) o fs{i)ip), 
fs{m) o /s(m-i) • ■ ■/s( 2 ) o /s(i)(p), ■ ■ • ] and 
the TO* computational step of {Q, A, rj) with initial 
configuration (s,0,T). Moreover, (s, 0,T) is a halting 
(immortal) configuration if and only if p is a halting 
(immortal) point with respect to the halting map f) and 
affine functions fk : Wk —> P where 1 < A: < Z. 
PROOF. From lemmas 2, 3 and definition 6, each 
computational step of {Q, A, rj) on current configuration 
{q,k,T) corresponds to applying a unique affine 
map fk (definitions 8 and 9) to corresponding point 
p = {x{r,k,T), y{r,k,T)). By induction, the 

correspondence holds for all n if the initial configuration 
(s,0,T) is immortal; this implies that (x(s,0,T), 
y{s,Q,T)) is an immortal point. Similarly, if (s,0,r) 
is a halting configuration, then machine {Q, A, rf) 
with initial configuration (s, 0, T) halts after N 
computational steps. For each step, the correspondence 
implies that the orbit of initial point (x(s,0,T), 
y{s, 0, T)) enters 21ft, on the iV* iteration. □ 
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